← Volver a CVEs
CVE-2026-5604
HIGH8.8
Descripcion
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Detalles CVE
Puntuacion CVSS v3.18.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado4/5/2026
Ultima modificacion4/5/2026
Fuentenvd
Avistamientos honeypot0
Debilidades (CWE)
CWE-119CWE-121
Referencias
https://vuldb.com/submit/785032(cna@vuldb.com)
https://vuldb.com/vuln/355396(cna@vuldb.com)
https://vuldb.com/vuln/355396/cti(cna@vuldb.com)
https://www.tenda.com.cn/(cna@vuldb.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.